Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform Expansion Pack/quarkus-spring-security-core-api

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configuredCVE-2026-22751 · GHSA-X2WQ-9X2F-FHJ7 org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat Medium Fix reported
Spring Security Vulnerable to User Attribute Enumeration when Using DaoAuthenticationProviderCVE-2026-22746 · GHSA-VXF7-QJ7Q-83FH org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat Low Fix reported
Spring Security has Potential Security Misconfiguration when Using withIssuerLocationCVE-2026-22748 · GHSA-CVC6-Q2CP-2XHW org.springframework.security:spring-security-oauth2-joseOpenShift Developer Tools and Services/jenkins MavenRed Hat Medium Fix reported
Spring Security Doesn't Correctly Include Servlet Path in Path Matching of HttpSecurity#securityMatchersCVE-2026-22753 · GHSA-4WRG-8WPC-H923 org.springframework.security:spring-security-configOpenShift Developer Tools and Services/jenkins MavenRed Hat High Fix reported
Spring Security HTTP Headers Are not Written Under Some ConditionsCVE-2026-22732 · GHSA-MF92-479X-3373 org.springframework.security:spring-security-webOpenShift Developer Tools and Services/jenkins MavenRed Hat Critical Fix reported